Those URL’s won’t work anymore without authentication. I assume (can’t remember) that they used to work on v1.5 without authentication?
You might want to take a look at this tutorial that uses the HTTP Request Flow Cards app to trigger flows on incoming HTTP requests (even though the tutorial is for iOS, it gives you the info you need to act on incoming HTTP requests, no matter where those requests are coming from).
